Search criteria
34 vulnerabilities found for BMC firmware for ASMB9-iKVM by ASUS
CVE-2021-28209 (GCVE-0-2021-28209)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 16:58
VLAI?
Title
ASUS BMC's firmware: path traversal - Delete video file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:13.105Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:25",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103036",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Delete video file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28209",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Delete video file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103036",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28209",
"datePublished": "2021-04-06T05:02:25.860876Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T16:58:26.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28208 (GCVE-0-2021-28208)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 22:19
VLAI?
Title
ASUS BMC's firmware: path traversal - Get video file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.868Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:24",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103035",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Get video file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28208",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Get video file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103035",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28208",
"datePublished": "2021-04-06T05:02:25.088577Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T22:19:36.654Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28207 (GCVE-0-2021-28207)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 20:53
VLAI?
Title
ASUS BMC's firmware: path traversal - Get Help file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.874Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:24",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103034",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Get Help file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28207",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Get Help file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103034",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28207",
"datePublished": "2021-04-06T05:02:24.218556Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T20:53:18.242Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28206 (GCVE-0-2021-28206)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 20:26
VLAI?
Title
ASUS BMC's firmware: path traversal - Record video file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:14.066Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:23",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103033",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Record video file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28206",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Record video file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103033",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28206",
"datePublished": "2021-04-06T05:02:23.403467Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T20:26:15.698Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28202 (GCVE-0-2021-28202)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-17 02:12
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Service configuration-2 function
Summary
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:14.013Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Service configuration-2 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:20",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103029",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-2 function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28202",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-2 function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Service configuration-2 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103029",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28202",
"datePublished": "2021-04-06T05:02:20.160097Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T02:12:15.278Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28201 (GCVE-0-2021-28201)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-17 01:31
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Service configuration-1 function
Summary
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:13.737Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Service configuration-1 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:19",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103028",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-1 function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28201",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-1 function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Service configuration-1 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103028",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28201",
"datePublished": "2021-04-06T05:02:19.279337Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T01:31:19.486Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28200 (GCVE-0-2021-28200)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 16:48
VLAI?
Title
ASUS BMC's firmware: buffer overflow - CD media configuration function
Summary
The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.953Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The CD media configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:18",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103027",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - CD media configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28200",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - CD media configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The CD media configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103027",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28200",
"datePublished": "2021-04-06T05:02:18.362839Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T16:48:30.923Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28199 (GCVE-0-2021-28199)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 16:48
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Modify user’s information function
Summary
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.939Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Modify user\u2019s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:17",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103026",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Modify user\u2019s information function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28199",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Modify user\u2019s information function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Modify user\u2019s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103026",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28199",
"datePublished": "2021-04-06T05:02:17.611246Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T16:48:36.806Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28197 (GCVE-0-2021-28197)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 19:10
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Active Directory configuration function
Summary
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.773Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Active Directory configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:15",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103024",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Active Directory configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28197",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Active Directory configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Active Directory configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103024",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28197",
"datePublished": "2021-04-06T05:02:16.045312Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T19:10:07.924Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28198 (GCVE-0-2021-28198)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 19:36
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Firmware protocol configuration
Summary
The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.653Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Firmware protocol configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:16",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103025",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Firmware protocol configuration",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28198",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Firmware protocol configuration"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Firmware protocol configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103025",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28198",
"datePublished": "2021-04-06T05:02:16.854558Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T19:36:34.788Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28196 (GCVE-0-2021-28196)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 19:05
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Generate SSL certificate function
Summary
The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.986Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:15",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103023",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Generate SSL certificate function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28196",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Generate SSL certificate function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103023",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28196",
"datePublished": "2021-04-06T05:02:15.183407Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T19:05:01.471Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28195 (GCVE-0-2021-28195)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-16 20:21
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Radius configuration function
Summary
The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.683Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Radius configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:14",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103022",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Radius configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28195",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Radius configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Radius configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103022",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28195",
"datePublished": "2021-04-06T05:02:14.363175Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T20:21:46.585Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28194 (GCVE-0-2021-28194)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-17 04:09
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Remote image configuration setting
Summary
The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:13.880Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:13",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103021",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Remote image configuration setting",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28194",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Remote image configuration setting"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103021",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28194",
"datePublished": "2021-04-06T05:02:13.511619Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T04:09:52.489Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28193 (GCVE-0-2021-28193)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-17 03:48
VLAI?
Title
ASUS BMC's firmware: buffer overflow - SMTP configuration function
Summary
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.689Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The SMTP configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:12",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103020",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - SMTP configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28193",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - SMTP configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The SMTP configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103020",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28193",
"datePublished": "2021-04-06T05:02:12.723266Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T03:48:35.862Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28192 (GCVE-0-2021-28192)
Vulnerability from cvelistv5 – Published: 2021-04-06 05:02 – Updated: 2024-09-17 03:28
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Remote video storage function
Summary
The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.695Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:11",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103019",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Remote video storage function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28192",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Remote video storage function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103019",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28192",
"datePublished": "2021-04-06T05:02:11.814209Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T03:28:44.149Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28209 (GCVE-0-2021-28209)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 16:58
VLAI?
Title
ASUS BMC's firmware: path traversal - Delete video file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:13.105Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:25",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103036",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Delete video file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28209",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Delete video file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103036",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28209",
"datePublished": "2021-04-06T05:02:25.860876Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T16:58:26.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28208 (GCVE-0-2021-28208)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 22:19
VLAI?
Title
ASUS BMC's firmware: path traversal - Get video file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.868Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:24",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103035",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Get video file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28208",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Get video file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103035",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28208",
"datePublished": "2021-04-06T05:02:25.088577Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T22:19:36.654Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28207 (GCVE-0-2021-28207)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 20:53
VLAI?
Title
ASUS BMC's firmware: path traversal - Get Help file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.874Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:24",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103034",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Get Help file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28207",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Get Help file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103034",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28207",
"datePublished": "2021-04-06T05:02:24.218556Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T20:53:18.242Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28206 (GCVE-0-2021-28206)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 20:26
VLAI?
Title
ASUS BMC's firmware: path traversal - Record video file function
Summary
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.
Severity ?
4.9 (Medium)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:14.066Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:23",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103033",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: path traversal - Record video file function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28206",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: path traversal - Record video file function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103033",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28206",
"datePublished": "2021-04-06T05:02:23.403467Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T20:26:15.698Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28202 (GCVE-0-2021-28202)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-17 02:12
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Service configuration-2 function
Summary
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:14.013Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Service configuration-2 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:20",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103029",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-2 function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28202",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-2 function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Service configuration-2 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103029",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28202",
"datePublished": "2021-04-06T05:02:20.160097Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T02:12:15.278Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28201 (GCVE-0-2021-28201)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-17 01:31
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Service configuration-1 function
Summary
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:13.737Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Service configuration-1 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:19",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103028",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-1 function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28201",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Service configuration-1 function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Service configuration-1 function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103028",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28201",
"datePublished": "2021-04-06T05:02:19.279337Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T01:31:19.486Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28200 (GCVE-0-2021-28200)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 16:48
VLAI?
Title
ASUS BMC's firmware: buffer overflow - CD media configuration function
Summary
The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.953Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The CD media configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:18",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103027",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - CD media configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28200",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - CD media configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The CD media configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103027",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28200",
"datePublished": "2021-04-06T05:02:18.362839Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T16:48:30.923Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28199 (GCVE-0-2021-28199)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 16:48
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Modify user’s information function
Summary
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.939Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Modify user\u2019s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:17",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103026",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Modify user\u2019s information function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28199",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Modify user\u2019s information function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Modify user\u2019s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103026",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28199",
"datePublished": "2021-04-06T05:02:17.611246Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T16:48:36.806Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28197 (GCVE-0-2021-28197)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 19:10
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Active Directory configuration function
Summary
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.773Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Active Directory configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:15",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103024",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Active Directory configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28197",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Active Directory configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Active Directory configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103024",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28197",
"datePublished": "2021-04-06T05:02:16.045312Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T19:10:07.924Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28198 (GCVE-0-2021-28198)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 19:36
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Firmware protocol configuration
Summary
The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.653Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Firmware protocol configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:16",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103025",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Firmware protocol configuration",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28198",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Firmware protocol configuration"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Firmware protocol configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103025",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28198",
"datePublished": "2021-04-06T05:02:16.854558Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T19:36:34.788Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28196 (GCVE-0-2021-28196)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 19:05
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Generate SSL certificate function
Summary
The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.986Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:15",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103023",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Generate SSL certificate function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28196",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Generate SSL certificate function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103023",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28196",
"datePublished": "2021-04-06T05:02:15.183407Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T19:05:01.471Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28195 (GCVE-0-2021-28195)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-16 20:21
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Radius configuration function
Summary
The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.683Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The Radius configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:14",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103022",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Radius configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28195",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Radius configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Radius configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103022",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28195",
"datePublished": "2021-04-06T05:02:14.363175Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-16T20:21:46.585Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28194 (GCVE-0-2021-28194)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-17 04:09
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Remote image configuration setting
Summary
The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:13.880Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:13",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103021",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Remote image configuration setting",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28194",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Remote image configuration setting"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103021",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28194",
"datePublished": "2021-04-06T05:02:13.511619Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T04:09:52.489Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28193 (GCVE-0-2021-28193)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-17 03:48
VLAI?
Title
ASUS BMC's firmware: buffer overflow - SMTP configuration function
Summary
The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.689Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The SMTP configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:12",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103020",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - SMTP configuration function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28193",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - SMTP configuration function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The SMTP configuration function in ASUS BMC\u2019s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103020",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28193",
"datePublished": "2021-04-06T05:02:12.723266Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T03:48:35.862Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-28192 (GCVE-0-2021-28192)
Vulnerability from nvd – Published: 2021-04-06 05:02 – Updated: 2024-09-17 03:28
VLAI?
Title
ASUS BMC's firmware: buffer overflow - Remote video storage function
Summary
The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Severity ?
4.9 (Medium)
CWE
- CWE-120 - Buffer Overflow
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ASUS | BMC firmware for ASMB9-iKVM |
Affected:
1.11.12
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T21:40:12.695Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "BMC firmware for ASMB9-iKVM",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.12"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.3"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.10.0"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.09"
}
]
},
{
"product": "BMC firmware for ESC4000 G4X",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.6"
}
]
},
{
"product": "BMC firmware for RS700-E9-RS12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.11.5"
}
]
},
{
"product": "BMC firmware for RS100-E10-PI2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS300-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.6"
}
]
},
{
"product": "BMC firmware for RS500A-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS500A-E9 RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for E700 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS C422 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for WS X299 PRO/SE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PA-U12/10G-2S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for KNPA-U16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.4"
}
]
},
{
"product": "BMC firmware for ESC4000 DHD G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.13.7"
}
]
},
{
"product": "BMC firmware for ESC4000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS24-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for RS720Q-E9-RS8-S",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.0"
}
]
},
{
"product": "BMC firmware for Z11PA-D8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for Z11PA-D8C",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.1"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS24-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.3"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS8-G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for Pro E800 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.14.2"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS500-E9-RS4-U",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for RS520-E9-RS8",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
},
{
"product": "BMC firmware for ESC8000 G4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for ESC8000 G4/10G",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.4"
}
]
},
{
"product": "BMC firmware for RS720-E9-RS12-E",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for WS C621E SAGE",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS500A-E10-PS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS500A-E10-RS4",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS700A-E9-RS4V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS12V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.2"
}
]
},
{
"product": "BMC firmware for RS720A-E9-RS24V2",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.1"
}
]
},
{
"product": "BMC firmware for Z11PR-D16",
"vendor": "ASUS",
"versions": [
{
"status": "affected",
"version": "1.15.3"
}
]
}
],
"datePublic": "2021-04-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-04-06T05:02:11",
"orgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"shortName": "twcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.asus.com/tw/support/callus/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html"
}
],
"solutions": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103019",
"discovery": "EXTERNAL"
},
"title": "ASUS BMC\u0027s firmware: buffer overflow - Remote video storage function",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"AKA": "TWCERT/CC",
"ASSIGNER": "cve@cert.org.tw",
"DATE_PUBLIC": "2021-04-06T02:48:00.000Z",
"ID": "CVE-2021-28192",
"STATE": "PUBLIC",
"TITLE": "ASUS BMC\u0027s firmware: buffer overflow - Remote video storage function"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "BMC firmware for ASMB9-iKVM",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "1.11.12"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24-E",
"version": {
"version_data": [
{
"version_value": "1.10.3"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.10.0"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.09"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4X",
"version": {
"version_data": [
{
"version_value": "1.11.6"
}
]
}
},
{
"product_name": "BMC firmware for RS700-E9-RS12",
"version": {
"version_data": [
{
"version_value": "1.11.5"
}
]
}
},
{
"product_name": "BMC firmware for RS100-E10-PI2",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS300-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.13.6"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E9 RS4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for E700 G4",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS C422 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for WS X299 PRO/SE",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-U12/10G-2S",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for KNPA-U16",
"version": {
"version_data": [
{
"version_value": "1.13.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 DHD G4",
"version": {
"version_data": [
{
"version_value": "1.13.7"
}
]
}
},
{
"product_name": "BMC firmware for ESC4000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS24-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for RS720Q-E9-RS8-S",
"version": {
"version_data": [
{
"version_value": "1.15.0"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PA-D8C",
"version": {
"version_data": [
{
"version_value": "1.14.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS24-U",
"version": {
"version_data": [
{
"version_value": "1.14.3"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS8-G",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for Pro E800 G4",
"version": {
"version_data": [
{
"version_value": "1.14.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS500-E9-RS4-U",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for RS520-E9-RS8",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for ESC8000 G4/10G",
"version": {
"version_data": [
{
"version_value": "1.15.4"
}
]
}
},
{
"product_name": "BMC firmware for RS720-E9-RS12-E",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for WS C621E SAGE",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-PS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS500A-E10-RS4",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS700A-E9-RS4V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS12V2",
"version": {
"version_data": [
{
"version_value": "1.15.2"
}
]
}
},
{
"product_name": "BMC firmware for RS720A-E9-RS24V2",
"version": {
"version_data": [
{
"version_value": "1.15.1"
}
]
}
},
{
"product_name": "BMC firmware for Z11PR-D16",
"version": {
"version_data": [
{
"version_value": "1.15.3"
}
]
}
}
]
},
"vendor_name": "ASUS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The specific function in ASUS BMC\u2019s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-120 Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
"refsource": "MISC",
"url": "https://www.asus.com/content/ASUS-Product-Security-Advisory/"
},
{
"name": "https://www.asus.com/tw/support/callus/",
"refsource": "MISC",
"url": "https://www.asus.com/tw/support/callus/"
},
{
"name": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html",
"refsource": "MISC",
"url": "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html"
}
]
},
"solution": [
{
"lang": "en",
"value": "update BMC\u0027s firmwares to the following versions:\nESC4000 G4X 1.15.6\nRS700-E9-RS12 1.15.4\nRS100-E10-PI2 1.15.3\nRS300-E10-PS4 1.15.3\nRS300-E10-RS4 1.15.3\nRS500A-E9-PS4 1.14.2\nRS500A-E9-RS4 1.14.2\nRS500A-E9 RS4 U 1.14.2\nE700 G4 1.14.2\nWS C422 PRO/SE 1.14.2\nWS X299 PRO/SE 1.14.2\nZ11PA-U12 1.15.2\nKNPA-U16 1.14.5\nESC4000 DHD G4 1.15.2\nESC4000 G4 1.15.6\nRS720Q-E9-RS24-S 1.15.1\nRS720Q-E9-RS8 1.15.1\nRS720Q-E9-RS8-S 1.15.1\nZ11PA-D8 1.15.2\nZ11PA-D8C 1.15.2\nRS720-E9-RS24-U 1.15.5\nRS720-E9-RS8-G 1.15.4\nRS500-E9-PS4 1.15.5\nPro E800 G4 1.15.2\nRS500-E9-RS4 1.15.5\nRS500-E9-RS4-U 1.15.5\nRS520-E9-RS12-E 1.15.4\nRS520-E9-RS8 1.15.4\nESC8000 G4 1.15.5\nESC8000 G4/10G 1.15.5\nRS720-E9-RS12-E 1.15.3\nWS C621E SAGE 1.15.3\nRS500A-E10-PS4 1.15.3\nRS500A-E10-RS4 1.15.3\nRS700A-E9-RS12V2 1.15.3\nRS700A-E9-RS4V2 1.15.3\nRS720A-E9-RS12V2 1.15.3\nRS720A-E9-RS24V2 1.15.3\nZ11PR-D16 1.15.4"
}
],
"source": {
"advisory": "TVN-202103019",
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e",
"assignerShortName": "twcert",
"cveId": "CVE-2021-28192",
"datePublished": "2021-04-06T05:02:11.814209Z",
"dateReserved": "2021-03-12T00:00:00",
"dateUpdated": "2024-09-17T03:28:44.149Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}